Security and privacy checklist
Practical security and privacy checks for a SaaS media product.
Baseline
- Use token rotation for long-lived sessions.
- Validate object ownership before job creation.
- Require legal consents during registration.
- Record security-relevant audit logs.
- Add rate limits to public auth endpoints.
- Provide privacy request workflows.